Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-5663

OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The patch is named edbb085e45788dccaf0e64d71534cfca925784b8. Applying a patch is the recommended action to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OFFIS DCMTK

  • 3.0affected
  • 3.1affected
  • 3.2affected
  • 3.3affected
  • 3.4affected
  • 3.5affected
  • 3.6affected
  • 3.7.0affected

References